Catalog: Admin: Tabulator Settings (unrestricted access)

.github/workflows/deploy-catalog.yaml

@@ -4,6 +4,7 @@ on:
   push:
     branches:
       - master
+      - tabulator-feature-flag  # FIXME: revert
     paths:
       - '.github/workflows/deploy-catalog.yaml'
       - 'catalog/**'
@@ -64,5 +65,5 @@ jobs:
             -t $ECR_REGISTRY_MP/$ECR_REPOSITORY_MP:$IMAGE_TAG \
             .
           docker push $ECR_REGISTRY_PROD/$ECR_REPOSITORY:$IMAGE_TAG
-          docker push $ECR_REGISTRY_GOVCLOUD/$ECR_REPOSITORY:$IMAGE_TAG
-          docker push $ECR_REGISTRY_MP/$ECR_REPOSITORY_MP:$IMAGE_TAG
+          # docker push $ECR_REGISTRY_GOVCLOUD/$ECR_REPOSITORY:$IMAGE_TAG
+          # docker push $ECR_REGISTRY_MP/$ECR_REPOSITORY_MP:$IMAGE_TAG

catalog/CHANGELOG.md

@@ -17,6 +17,7 @@ where verb is one of
 
 ## Changes
 
+- [Added] Admin: Tabulator Settings (unrestricted access) ([#4255](https://github.com/quiltdata/quilt/pull/4255))
 - [Added] Support "html" type in `quilt_summarize.json` ([#4252](https://github.com/quiltdata/quilt/pull/4252))
 - [Fixed] Resolve caching issues where changes in `.quilt/{workflows,catalog}` were not applied ([#4245](https://github.com/quiltdata/quilt/pull/4245))
 - [Added] A shortcut to enable adding files to a package from the current bucket ([#4245](https://github.com/quiltdata/quilt/pull/4245))

catalog/app/containers/Admin/Settings/Settings.tsx

@@ -12,6 +12,7 @@
 
 import * as Form from '../Form'
 import SearchSettings from './SearchSettings'
+import TabulatorSettings from './TabulatorSettings'
 import ThemeEditor from './ThemeEditor'
 
 function useBeta(): [boolean, (b: boolean) => Promise<void>] {
@@ -273,6 +274,10 @@
   title: {
     margin: t.spacing(0, 0, 2),
     padding: t.spacing(0, 2),
+
+    '* + &': {
+      marginTop: t.spacing(2),
+    },
   },
 }))
 
@@ -324,6 +329,13 @@
           </M.Paper>
         </M.Grid>
       </M.Grid>
+
+      <M.Typography variant="h5" className={classes.title}>
+        Tabulator Settings
+      </M.Typography>
+      <M.Paper className={classes.group}>
+        <TabulatorSettings />
+      </M.Paper>
     </div>
   )
 }

catalog/app/containers/Admin/Settings/TabulatorSettings.tsx

@@ -0,0 +1,99 @@
+import * as Eff from 'effect'
+import * as React from 'react'
+import * as M from '@material-ui/core'
+import * as Lab from '@material-ui/lab'
+import * as Sentry from '@sentry/react'
+
+import Skeleton from 'components/Skeleton'
+import { docs } from 'constants/urls'
+import * as Notifications from 'containers/Notifications'
+import * as GQL from 'utils/GraphQL'
+import StyledLink from 'utils/StyledLink'
+
+import UNRESTRICTED_QUERY from './gql/TabulatorUnrestricted.generated'
+import SET_UNRESTRICTED_MUTATION from './gql/SetTabulatorUnrestricted.generated'
+
+interface ToggleProps {
+  checked: boolean
+}
+
+const NONE = Eff.Option.none<{ value: boolean }>()
+
+function Toggle({ checked }: ToggleProps) {
+  const { push: notify } = Notifications.use()
+  const mutate = GQL.useMutation(SET_UNRESTRICTED_MUTATION)
+  const [mutationState, setMutationState] = React.useState(NONE)
+
+  const handleChange = React.useCallback(
+    async (_event, value: boolean) => {
+      if (Eff.Option.isSome(mutationState)) return
+      setMutationState(Eff.Option.some({ value }))
+      try {
+        await mutate({ value })
+      } catch (e) {
+        Sentry.captureException(e)
+        notify(`Failed to update tabulator settings: ${e}`)
+      } finally {
+        setMutationState(NONE)
+      }
+    },
+    [mutate, notify, mutationState, setMutationState],
+  )
+
+  const value = Eff.pipe(
+    mutationState,
+    Eff.Option.map((x) => x.value),
+    Eff.Option.getOrElse(() => checked),
+  )
+
+  return (
+    <>
+      <M.FormControlLabel
+        control={
+          <M.Switch
+            checked={value}
+            onChange={handleChange}
+            disabled={Eff.Option.isSome(mutationState)}
+          />
+        }
+        label="Enable unrestricted access"
+      />
+      <M.FormHelperText>
+        <b>CAUTION:</b> When enabled, Tabulator defers all access control to AWS and does
+        not enforce any extra restrictions.{' '}
+        <StyledLink
+          href={`${docs}/advanced-features/tabulator#unrestricted-access`}
+          target="_blank"
+        >
+          Learn more
+        </StyledLink>{' '}
+        in the documentation.
+      </M.FormHelperText>
+    </>
+  )
+}
+
+export default function TabulatorSettings() {
+  const query = GQL.useQuery(UNRESTRICTED_QUERY)
+
+  return (
+    <M.FormGroup>
+      {GQL.fold(query, {
+        data: ({ admin }) => <Toggle checked={admin.tabulatorUnrestricted} />,
+        fetching: () => (
+          <>
+            <Skeleton width="40%" height={38} />
+            <Skeleton width="80%" height={20} mt="3px" />
+          </>
+        ),
+        error: (e) => (
+          <Lab.Alert severity="error">
+            Could not fetch tabulator settings:
+            <br />
+            {e.message}
+          </Lab.Alert>
+        ),
+      })}
+    </M.FormGroup>
+  )
+}

catalog/app/containers/Admin/Settings/gql/SetTabulatorUnrestricted.generated.ts

@@ -0,0 +1,81 @@
+/* eslint-disable @typescript-eslint/naming-convention */
+import type { TypedDocumentNode as DocumentNode } from '@graphql-typed-document-node/core'
+import * as Types from '../../../../model/graphql/types.generated'
+
+export type containers_Admin_Settings_gql_SetTabulatorUnrestrictedMutationVariables =
+  Types.Exact<{
+    value: Types.Scalars['Boolean']
+  }>
+
+export type containers_Admin_Settings_gql_SetTabulatorUnrestrictedMutation = {
+  readonly __typename: 'Mutation'
+} & {
+  readonly admin: { readonly __typename: 'AdminMutations' } & {
+    readonly setTabulatorUnrestricted: {
+      readonly __typename: 'TabulatorUnrestrictedResult'
+    } & Pick<Types.TabulatorUnrestrictedResult, 'tabulatorUnrestricted'>
+  }
+}
+
+export const containers_Admin_Settings_gql_SetTabulatorUnrestrictedDocument = {
+  kind: 'Document',
+  definitions: [
+    {
+      kind: 'OperationDefinition',
+      operation: 'mutation',
+      name: {
+        kind: 'Name',
+        value: 'containers_Admin_Settings_gql_SetTabulatorUnrestricted',
+      },
+      variableDefinitions: [
+        {
+          kind: 'VariableDefinition',
+          variable: { kind: 'Variable', name: { kind: 'Name', value: 'value' } },
+          type: {
+            kind: 'NonNullType',
+            type: { kind: 'NamedType', name: { kind: 'Name', value: 'Boolean' } },
+          },
+        },
+      ],
+      selectionSet: {
+        kind: 'SelectionSet',
+        selections: [
+          {
+            kind: 'Field',
+            name: { kind: 'Name', value: 'admin' },
+            selectionSet: {
+              kind: 'SelectionSet',
+              selections: [
+                {
+                  kind: 'Field',
+                  name: { kind: 'Name', value: 'setTabulatorUnrestricted' },
+                  arguments: [
+                    {
+                      kind: 'Argument',
+                      name: { kind: 'Name', value: 'value' },
+                      value: { kind: 'Variable', name: { kind: 'Name', value: 'value' } },
+                    },
+                  ],
+                  selectionSet: {
+                    kind: 'SelectionSet',
+                    selections: [
+                      {
+                        kind: 'Field',
+                        name: { kind: 'Name', value: 'tabulatorUnrestricted' },
+                      },
+                    ],
+                  },
+                },
+              ],
+            },
+          },
+        ],
+      },
+    },
+  ],
+} as unknown as DocumentNode<
+  containers_Admin_Settings_gql_SetTabulatorUnrestrictedMutation,
+  containers_Admin_Settings_gql_SetTabulatorUnrestrictedMutationVariables
+>
+
+export { containers_Admin_Settings_gql_SetTabulatorUnrestrictedDocument as default }

catalog/app/containers/Admin/Settings/gql/SetTabulatorUnrestricted.graphql

@@ -0,0 +1,7 @@
+mutation($value: Boolean!) {
+  admin {
+    setTabulatorUnrestricted(value: $value) {
+      tabulatorUnrestricted
+    }
+  }
+}

catalog/app/containers/Admin/Settings/gql/TabulatorUnrestricted.generated.ts

@@ -0,0 +1,49 @@
+/* eslint-disable @typescript-eslint/naming-convention */
+import type { TypedDocumentNode as DocumentNode } from '@graphql-typed-document-node/core'
+import * as Types from '../../../../model/graphql/types.generated'
+
+export type containers_Admin_Settings_gql_TabulatorUnrestrictedQueryVariables =
+  Types.Exact<{ [key: string]: never }>
+
+export type containers_Admin_Settings_gql_TabulatorUnrestrictedQuery = {
+  readonly __typename: 'Query'
+} & {
+  readonly admin: { readonly __typename: 'AdminQueries' } & Pick<
+    Types.AdminQueries,
+    'tabulatorUnrestricted'
+  >
+}
+
+export const containers_Admin_Settings_gql_TabulatorUnrestrictedDocument = {
+  kind: 'Document',
+  definitions: [
+    {
+      kind: 'OperationDefinition',
+      operation: 'query',
+      name: {
+        kind: 'Name',
+        value: 'containers_Admin_Settings_gql_TabulatorUnrestricted',
+      },
+      selectionSet: {
+        kind: 'SelectionSet',
+        selections: [
+          {
+            kind: 'Field',
+            name: { kind: 'Name', value: 'admin' },
+            selectionSet: {
+              kind: 'SelectionSet',
+              selections: [
+                { kind: 'Field', name: { kind: 'Name', value: 'tabulatorUnrestricted' } },
+              ],
+            },
+          },
+        ],
+      },
+    },
+  ],
+} as unknown as DocumentNode<
+  containers_Admin_Settings_gql_TabulatorUnrestrictedQuery,
+  containers_Admin_Settings_gql_TabulatorUnrestrictedQueryVariables
+>
+
+export { containers_Admin_Settings_gql_TabulatorUnrestrictedDocument as default }

catalog/app/containers/Admin/Settings/gql/TabulatorUnrestricted.graphql

@@ -0,0 +1,5 @@
+query {
+  admin {
+    tabulatorUnrestricted
+  }
+}

catalog/app/model/graphql/schema.generated.ts

@@ -240,9 +240,37 @@ export default {
               },
             ],
           },
+          {
+            name: 'setTabulatorUnrestricted',
+            type: {
+              kind: 'NON_NULL',
+              ofType: {
+                kind: 'OBJECT',
+                name: 'TabulatorUnrestrictedResult',
+                ofType: null,
+              },
+            },
+            args: [
+              {
+                name: 'value',
+                type: {
+                  kind: 'NON_NULL',
+                  ofType: {
+                    kind: 'SCALAR',
+                    name: 'Boolean',
+                    ofType: null,
+                  },
+                },
+              },
+            ],
+          },
         ],
         interfaces: [],
       },
+      {
+        kind: 'SCALAR',
+        name: 'Boolean',
+      },
       {
         kind: 'OBJECT',
         name: 'AdminQueries',
@@ -280,13 +308,21 @@ export default {
             },
             args: [],
           },
+          {
+            name: 'tabulatorUnrestricted',
+            type: {
+              kind: 'NON_NULL',
+              ofType: {
+                kind: 'SCALAR',
+                name: 'Boolean',
+                ofType: null,
+              },
+            },
+            args: [],
+          },
         ],
         interfaces: [],
       },
-      {
-        kind: 'SCALAR',
-        name: 'Boolean',
-      },
       {
         kind: 'OBJECT',
         name: 'BooleanPackageUserMetaFacet',
@@ -5468,6 +5504,25 @@ export default {
         ],
         interfaces: [],
       },
+      {
+        kind: 'OBJECT',
+        name: 'TabulatorUnrestrictedResult',
+        fields: [
+          {
+            name: 'tabulatorUnrestricted',
+            type: {
+              kind: 'NON_NULL',
+              ofType: {
+                kind: 'SCALAR',
+                name: 'Boolean',
+                ofType: null,
+              },
+            },
+            args: [],
+          },
+        ],
+        interfaces: [],
+      },
       {
         kind: 'OBJECT',
         name: 'TestStats',